Quote Originally Posted by Nightwalker83 View Post
What I don't understand is why is it working without the "mysql_real_escape_string()" but not when the string is included
You need to turn error reporting to its maximum level, as I have already stated. If you are sending the data via a flash script (which does not send post variables any differently from using HTML), then in order to see the errors, you need to create a small HTML page to submit some dummy data. Or you need to set log_errors to true and the error_log to a file to have them logged to a file in addition to setting error_reporting to E_ALL.

Once you have done this, you need to check the errors / error log every time you execute a script. You should take special note of warnings and get rid of all notices which are usually caused if a variable is undefined.

Quote Originally Posted by Nightwalker83 View Post
Edit:

So the original code would be:

PHP Code:
$cid $_POST['cid']; 
as shown in the data submission script dated "Yesterday O1:08 PM". All I did to the original script was add the "mysql_real_escape_string()" that is all.
You are using the mysql_real_escape_string() function before you are connecting to the database. You have already been told this several times.


Quote Originally Posted by Nightwalker83 View Post
You can see the difference between that and the code in post #43. The scripts in posts #41 and #43 are the two main scripts for the website the other scripts just use the same code mentioned above to insert/modify database data at different times on for the website.
I think I can speak for everyone in saying that we would rather you took the time to post the entire script as it exists at the moment. And the code for the HTML page you are going to create to submit the dummy data.